{"id":"CVE-2025-65720","aliases":["EUVD-2025-210474","GHSA-8j86-h8gg-797p","PYSEC-2026-4219"],"status":"published","title":"GPT Researcher MCP STDIO configuration allows remote command execution","description":"An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00722,"percentile":0.54311,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-77"],"published":"2026-07-15T00:00:00Z","modified":"2026-10-15T14:55:46Z","affected":[{"source":"ghsa","ecosystem":"PyPI","package":"gpt-researcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.14.5"},{"last_affected":"0.14.7"}]}]},{"source":"osv","ecosystem":"PyPI","package":"gpt-researcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.14.5"},{"last_affected":"0.14.7"}]}],"versions":["0.14.5","0.14.6","0.14.7"]},{"source":"osv","ecosystem":"PyPI","package":"gpt-researcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.14.5"},{"last_affected":"0.14.7"}]}],"versions":["0.14.5","0.14.6","0.14.7"]}],"references":[{"url":"https://github.com/assafelovic/gpt-researcher","tags":["package"]},{"url":"https://www.ox.security/blog/gpt-researcher-remote-code-execution","tags":["web"]},{"url":"https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-65720","tags":["advisory"]},{"url":"https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem","tags":["web"]},{"url":"https://github.com/advisories/GHSA-8j86-h8gg-797p","tags":["advisory"]},{"url":"https://pypi.org/project/gpt-researcher","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-65720","description":"An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.","status":"published","published":"2026-07-15T00:00:00Z","modified":"2026-07-16T18:12:05.298Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:32:26.64278Z"}],"euvd":[{"id":"EUVD-2025-210474","description":"An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.","status":"published","published":"2026-07-15T00:00:00Z","modified":"2026-07-16T18:12:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:19:51.364603Z"}],"ghsa":[{"id":"GHSA-8j86-h8gg-797p","title":"GPT Researcher MCP STDIO configuration allows remote command execution","description":"An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.","status":"published","published":"2026-07-16T00:31:33Z","modified":"2026-10-02T22:38:52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:41:24.739884Z"}],"nvd":[{"id":"CVE-2025-65720","description":"An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.","status":"published","published":"2026-07-15T22:16:45.417Z","modified":"2026-10-06T22:10:00.247Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:12:02.535029Z"}],"osv":[{"id":"GHSA-8j86-h8gg-797p","title":"GPT Researcher MCP STDIO configuration allows remote command execution","description":"An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.","status":"published","published":"2026-07-16T00:31:33Z","modified":"2026-10-15T14:55:46.566578398Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:46:42.437513Z"},{"id":"PYSEC-2026-4219","title":"GPT Researcher MCP STDIO configuration allows remote command execution","description":"An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.","status":"published","published":"2026-10-15T10:22:43.607342Z","modified":"2026-10-15T14:45:05.906144331Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:57.671918Z"}]}}